Lucene search
MitreCVE-2014-7980HistoryOct 08, 2014 - 6:55 p.m.
CVE-2014-7980
2014-10-0818:55:04
CWE-79
mitre
web.nvd.nist.gov
26
cve-2014-7980
cross-site scripting
xss
zen theme
drupal
remote authenticated users
web security
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
45.1%
Multiple cross-site scripting (XSS) vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the “administer themes” permission to inject arbitrary web script or HTML via the skip_link_text setting and unspecified other theme settings.
Affected configurations
Node
drupalzenMatch7.x-3.0
ORdrupalzenMatch7.x-3.1
ORdrupalzenMatch7.x-3.2
ORdrupalzenMatch7.x-5.0
ORdrupalzenMatch7.x-5.1
ORdrupalzenMatch7.x-5.2
ORdrupalzenMatch7.x-5.3
ORdrupalzenMatch7.x-5.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| drupal | zen | 7.x-3.0 | cpe:2.3:a:drupal:zen:7.x-3.0:*:*:*:*:*:*:* |
| drupal | zen | 7.x-3.1 | cpe:2.3:a:drupal:zen:7.x-3.1:*:*:*:*:*:*:* |
| drupal | zen | 7.x-3.2 | cpe:2.3:a:drupal:zen:7.x-3.2:*:*:*:*:*:*:* |
| drupal | zen | 7.x-5.0 | cpe:2.3:a:drupal:zen:7.x-5.0:*:*:*:*:*:*:* |
| drupal | zen | 7.x-5.1 | cpe:2.3:a:drupal:zen:7.x-5.1:*:*:*:*:*:*:* |
| drupal | zen | 7.x-5.2 | cpe:2.3:a:drupal:zen:7.x-5.2:*:*:*:*:*:*:* |
| drupal | zen | 7.x-5.3 | cpe:2.3:a:drupal:zen:7.x-5.3:*:*:*:*:*:*:* |
| drupal | zen | 7.x-5.4 | cpe:2.3:a:drupal:zen:7.x-5.4:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-7980
2014-10-08 18:55:04
cvelist
cvelist
CVE-2014-7980
2014-10-08 18:00:00
prion
prion
Cross site scripting
2014-10-08 18:55:00
drupal
drupal
SA-CONTRIB-2014-047 - Zen - Cross Site Scripting
2014-04-30 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
45.1%
Related for CVE-2014-7980